TIDAL Enterprise Dashboard Privacy Policy Last Updated: October 10, 2023 This Privacy Policy describes how TIDAL Music LLC (“TIDAL,” “we,” “us” or “our”) collects, uses and shares information about you and the choices you have regarding this information concerning your access to and use of the Enterprise Dashboard. This Privacy Policy applies to the information we collect when you access or use our products, services and technology platforms concerning the Enterprise Dashboard (including, without limitation, our websites, mobile applications and other TIDAL-controlled properties that link to this Privacy Policy) (collectively, the “Services”). Please note that this Privacy Policy does not apply to your use of third-party sites, services or applications you may access through our Services, and we are not responsible for the data collection, use and disclosure practices of the operators of such third-party sites, services and applications. We encourage you to review the privacy policies of those third parties for more information regarding their privacy practices. CHANGES TO THIS PRIVACY POLICY We may change this Privacy Policy from time to time. If we make changes, we will notify you by posting the updated policy on the Services; the “Last Updated” legend above indicates when this Privacy Policy was last revised. In some cases, we may provide you with additional notice, such as adding a statement to our homepage or sending an email notification to you. Any changes will become effective when we post the revised Privacy Policy. Your use of the Services following such changes means that you acknowledge the updated Privacy Policy. COLLECTION OF INFORMATION Information You Provide to Us We collect information that you provide directly to us. For example, we collect information when you download our mobile application(s), create an account, participate in any interactive features of the Services, fill out a form or other questionnaire, participate in a contest or promotion, apply for a job with us, communicate with us via third party social media sites, request customer or technical support or otherwise communicate with us. The types of information we may collect include your name, email address, mailing and billing address, user ID, mobile phone number, payment information and any other information you choose to provide. We may also collect your user credentials, including your email address and password, to access third-party royalty distribution platforms on your behalf. Information We Collect From Other Sources We may also obtain information about you from other sources and combine that with information we collect through the Services. For example, if you connect your accounts with third-party platforms to your TIDAL Enterprise Dashboard account, we may collect information about you from such third-party platforms, including financial information about you. Information We Collect Automatically When You Use the Services When you access or use the Services, we automatically collect information about you, including the following: • Log and Usage Information: We collect information about your access to and use of the Services, including the type of browser you use, app version, access times, pages viewed, your IP address and the page you visited before navigating to the Services. • Device Information: We collect information about the computer or mobile device you use to access our Services, including the hardware model, operating system and version, unique device identifiers and mobile network information. • Information Collected by Cookies and Other Tracking Technologies: We use different technologies to collect information, which may include cookies and web beacons. Cookies are small data files stored on your hard drive or in device memory that help us to improve our Services and your experience, to see which areas and features of our Services are popular and to count visits. Web beacons are electronic images that may be used in our Services or emails and that help deliver cookies, count visits and understand usage and campaign effectiveness. For more information about cookies and how to disable them, please see “Your Choices” below. USE OF INFORMATION We may use the information we collect to provide, maintain and improve the Services, including to assess the quality of the Services. We may also use the information we collect to: • Provide the services you request, provide functionality related to such services, process transactions and send related information to you, including notices and reports regarding your accounts with third-party platforms; • Verify your identity and, if applicable, authorization for you to use the Services; • Respond to your comments, questions and requests; • Send you technical notices, updates, security alerts, and support and administrative messages and to respond to your comments, questions, and customer service requests; • Communicate with you about products, services, offers, promotions, rewards and events offered by us or others and to provide news and information we think will be of interest to you (see Your Choices below for information about how to opt out of these communications at any time); • Monitor and analyze trends, usage, and activities in connection with the Services; • Detect, investigate and prevent fraudulent transactions and other illegal activities and protect the rights and property of ourselves and others; • Personalize your online experience and the advertisements you see when you use the Services or third-party platforms based on your preferences, interests, and browsing behavior; • Aggregate and/or anonymize information about you; • Enforce our agreements and policies, and carry out activities that are required to comply with our legal obligations; and • Carry out any other purpose for which the information was collected, which are clearly disclosed to you at the time you provide personal information or with your consent. SHARING OF INFORMATION We may share or transfer information about you as follows or as otherwise described in this Privacy Policy or at the time of collection: • With our affiliates for the purposes described in this Privacy Policy; • With vendors, consultants and other service providers who need access to such information to carry out work on our behalf, including service providers that provide us with IT support, hosting, payment processing, customer service, and related services; • With third parties for their own services and marketing purposes, unless you opt out of this type of sharing by emailing us at artistsupport@tidal.com; • In response to a request for information if we believe disclosure is in accordance with any applicable law, regulation or legal process, or as we otherwise believe to be required by any applicable law, rule or regulation; • If we believe your actions are inconsistent with the spirit or language of our user agreements or policies, or to protect or enforce the rights, property and safety of ourselves or others. We may access, preserve, and disclose any information we store associated with you to external parties if we, in good faith, believe doing so is required or appropriate to: comply with law enforcement or national security requests and legal process, such as a court order or subpoena; protect your, our, or others’ rights, property, or safety; enforce our policies or contracts; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity; • In connection with, or during negotiations of, any merger, sale of our assets, financing or acquisition of all or a portion of our business to another company (including in connection with any bankruptcy or similar proceedings); and • With your consent or at your direction, including if we notify you through the Services that certain information you provide will be shared in a particular manner and you provide this information. Also, by using the Services, you may elect to disclose information about yourself to others, such as on profile pages or other services to which you are able to post information or content. We may also share aggregated or de-identified information, which cannot reasonably be used to identify you. ADVERTISING AND ANALYTICS SERVICES We may allow others to provide analytics services and serve advertisements on our behalf. These entities may use cookies, web beacons, device identifiers and other technologies to collect information about your use of the Services and other websites and applications, including your IP address, web browser, mobile network information, pages viewed, time spent on pages or in apps, links clicked and conversion information. This information may be used by TIDAL and others to, among other things, analyze and track data, deliver advertising and content targeted to your interests on our Services and other websites and better understand your online activity. Your device may also include a feature (“Limit Ad Tracking” on iOS or “Opt Out of Interest-Based Ads” or “Opt Out of Ads Personalization” on Android) that allows you to opt out of having certain information collected through apps used for behavioral advertising purposes. TRANSFER OF INFORMATION TO THE U.S. AND OTHER COUNTRIES We are based in the United States and the information we collect is governed by U.S. law. By accessing or using the Services or otherwise providing information to us, you consent to the processing and transfer of information in and to the United States and other countries, where you might not have the same rights and protections as you do under local law. DATA RETENTION We store the info we collected about you for as long as is needed or permitted for the purpose(s) for which we originally collected it, or for other legitimate business purposes, including to meet our legal, regulatory or other compliance obligations. YOUR CHOICES Your Information You may update certain account information you provide to us at any time by logging into your account or emailing us at artistsupport@tidal.com. If you wish to delete your account, please email us at artistsupport@tidal.com. Please note that we may retain certain information as required by law or for legitimate business purposes. We may also retain cached or archived copies of information about you for a certain period. Cookies Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Services. “Do Not Track.” Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers. Promotional Communications You may opt out of receiving promotional communications from us by following the instructions in those communications or by emailing us at artistsupport@tidal.com. If you opt out, we may still send you non-promotional communications, such as messages about your account or our ongoing business relations. Mobile Push Notifications/Alerts With your consent, we may send promotional and non-promotional push notifications or alerts to your mobile device. You can deactivate these messages at any time by changing the notification settings on your mobile device. SUPPLEMENTAL NOTICE FOR CALIFORNIA RESIDENTS This Supplemental Notice for California Residents supplements our Privacy Policy and only applies to our processing of personal information concerning the Enterprise Dashboard that is subject to the California Consumer Privacy Act of 2018 (as amended from time to time) (“CCPA”). The CCPA provides California residents with the right to know what categories of personal information TIDAL has collected about them and whether TIDAL disclosed that personal information for a business purpose (e.g., to a service provider), whether TIDAL “sold” that personal information, and whether TIDAL “shared” that personal information for “cross-context behavioral advertising” in the preceding 12 months. California residents can find this information about the categories of personal information collected and the purposes for which we use personal information as described above in this Privacy Policy under “Collection of Personal Information” and “Use of Personal Information”. The categories of sources from which we collect personal information are set forth in “Collection of Personal Information”. Our business and commercial purposes for collecting and disclosing personal information are set forth in “Use of Personal Information” and “Sharing of Personal Information” above, respectively. We will retain personal information in accordance with the time periods set forth in “Data Retention” above. We do not “sell” or “share” the personal information of California consumers as such terms are defined under the CCPA. Although some of the information we collect and process about you may be considered sensitive personal information, we only process such information for purposes authorized by law, such as to provide services you request from us. Your Privacy Rights Under the CCPA, you may have a right to: • Confirm what personal information we have collected about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you (the right to know). • Request correction of your personal information where it is inaccurate (the right to correct). • Request deletion of your personal information, subject to certain exceptions (the right to delete). • If we sell personal information or share it with third parties for cross-context behavioral advertising, request that we stop such selling or sharing (the right to opt out). • Not to receive discriminatory treatment by us for your exercising the rights conferred by the CCPA. If you would like to exercise any of these rights, please contact us as set forth in “Contact Information” below. We will process such requests in accordance with applicable laws. To protect your privacy, we will take steps to reasonably verify your identity before fulfilling your requests submitted under the CCPA. These steps may involve asking you to provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. To authorize an agent, provide written authorization signed by you and your designated agent using the information found in “Contact Information” below and ask us for additional instructions. CHILDREN’S INFORMATION The Services are not directed to children under 13, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has uploaded personal information to our site without your consent, you may contact us as described in “Contact Information” below. If we become aware that a child has provided us with personal information in violation of applicable law, we will delete any personal information we have collected, unless we have a legal obligation to keep it, and terminate the child’s account, if applicable. THIRD-PARTY WEBSITES/APPLICATIONS The Services may contain links to other websites/applications and other websites/applications may reference or link to our Services. These third-party services are not controlled by us. We encourage our users to read the privacy policies of each website and application with which they interact. We do not endorse, screen, or approve, and are not responsible for, the privacy practices or content of such other websites or applications. Providing personal information to third-party websites or applications is at your own risk. CONTACT INFORMATION If you have questions or comments about our Privacy Policy, please email us at artistsupport@tidal.com